I thought this was something I was doing wrong, as I had pretty much
taken the AuthForAll sample code directly to add some rights to the
authorization policy database, but it turns out that it just doesn't
want to add the class I was trying for....
Every time I tried it failed. However, using the same code, I can
easily add this:
kAuthorizationRuleClassAllow "allow"
I'd really like to have a right set up that requires only that the
user, even if non-admin, has to authenticate themselves.
Oops - you've found a bug. /etc/authorization only contains
authenticate-session-owner as a rule. I will add that rule in
/etc/authorization by the name authenticate-session-user too.
In the mean while keep using the constant and modify or duplicate the
rule in /etc/authorization.
Conrad.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Apple-cdsa mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/apple-cdsa/email@hidden
